Evilginx loves Temporary Access Passes too

Check out this article via web browser: Evilginx loves Temporary Access Passes too

Evilginx is known for capturing user cookies, even if they are secured by MFA methods like SMS, TOTP, push notifications or passwordless phone sign-in. In bootstrap and recovery scenario’s, the account will most likely have a Temporary Access Pass enabled, so the user can enroll for strong authentication. I wanted to point out that Evilginx… 

The post Evilginx loves Temporary Access Passes too appeared first on JanBakker.tech.